Look on www.securityfocus.com: they had a thread about .procmailrc rules for email trojans about the time of the (melissa?) virus.
On Mon, 13 Nov 2000 kmself@ix.netcom.com wrote: > on Mon, Nov 13, 2000 at 09:14:11PM -0900, Ethan Benson ([EMAIL PROTECTED]) > wrote: > > On Mon, Nov 13, 2000 at 09:05:51PM -0800, Eric G . Miller wrote: > > > Umm someone's repeating debian-user mails. This get's to be obnoxious! > > > > > > "H.C.Hsiang" <[EMAIL PROTECTED]>, seems to be the culprit. > > > Time for a killfile entry. > > > > yeah it looks like this: > > > > :0 > > * ^X-Mailer: Microsoft Outlook Express.* > > /dev/null > > > > please folks use a real MUA, despite what MS says there ARE > > alternatives to this crap. > > While I'm not completely unconvinced of the merits of such a filter, > it's a bit further than I plan to go this week. > > Anyone got a procmail recipie which will detect a file 'navidad.exe' as > an attachment? I'm still wrestling with procmailrc rules.... > > > -- When you are having a bad day, and it seems like everybody is trying to tick you off, remember that it takes 42 muscles to produce a frown, but only 4 muscles to work the trigger of a good sniper rifle. Who is John galt? [EMAIL PROTECTED], that's who!